CVE-2018-20848

概要

参考情報

• packetstormsecurity.com/files/147467/Peel-Shopping-Cart-9.0.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html · Exploit

peel shopping のその他の脆弱性

• CVE-2021-41672中 6.5PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the administrator group can…
• CVE-2021-37593緊急 9.1PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest (unauthenticated) can inject a malicious SQL query in order to …
• CVE-2021-27190中 5.4A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available. The user sup…
• CVE-2019-20178中 6.5Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user.
• CVE-2018-1000887中 4.8Peel shopping peel-shopping_9_1_0 version contains a Cross Site Scripting (XSS) vulnerability that can result in an authenticated user injec…